Read the docs
TI-2023-25305 Aliases CVE-2023-46846

Squid: request/response smuggling in http/1.1 and icap

Priority MEDIUM 56CWE-444Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · Low · None
Fix status
Partial Red Hat: 13 fixed, 1 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

SQUID is vulnerable to HTTP request smuggling, caused by chunked decoder lenience, allows a remote attacker to perform Request/Response smuggling past firewall and frontend security systems.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.07158 94th percentileScored 2026-11-07
Fix Partial squid: 6.4Red Hat: 10 advisoriesRed Hat: 13 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—squid2.6 to before 6.46.4Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—7:3.5.20-17.el7_9.13Patch availableCNA
Red HatRed Hat Enterprise Linux 8—8080020231030214932.63b34585Patch availableCNA
Red HatRed Hat Enterprise Linux 8—8090020231030224841.a75119d5Patch availableCNA
Red HatRed Hat Enterprise Linux 8.1 Update Services for SAP Solutions—8010020231101141358.c27ad7f8Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Advanced Update Support—8020020231101135052.4cda2c84Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Telecommunications Update Service—8020020231101135052.4cda2c84Patch availableCNA
Red HatRed Hat Enterprise Linux 8.2 Update Services for SAP Solutions—8020020231101135052.4cda2c84Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—8040020231101101624.522a0ee4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Telecommunications Update Service—8040020231101101624.522a0ee4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Update Services for SAP Solutions—8040020231101101624.522a0ee4Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support—8060020231031165747.ad008a3aPatch availableCNA
Red HatRed Hat Enterprise Linux 9—7:5.5-5.el9_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9—7:5.5-6.el9_3.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Extended Update Support—7:5.2-1.el9_0.3Patch availableCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
Red HatRed Hat Enterprise Linux 6——No fix listedCNA
  • squid Vendor— Affected 2.6 to before 6.4 Fixed in 6.4 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 7:3.5.20-17.el7_9.13 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8080020231030214932.63b34585 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8090020231030224841.a75119d5 Patch available CNA
  • Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8010020231101141358.c27ad7f8 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Advanced Update Support VendorRed Hat Affected — Fixed in 8020020231101135052.4cda2c84 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Telecommunications Update Service VendorRed Hat Affected — Fixed in 8020020231101135052.4cda2c84 Patch available CNA
  • Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8020020231101135052.4cda2c84 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 8040020231101101624.522a0ee4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Telecommunications Update Service VendorRed Hat Affected — Fixed in 8040020231101101624.522a0ee4 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 8040020231101101624.522a0ee4 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support VendorRed Hat Affected — Fixed in 8060020231031165747.ad008a3a Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 7:5.5-5.el9_2.1 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 7:5.5-6.el9_3.1 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Extended Update Support VendorRed Hat Affected — Fixed in 7:5.2-1.el9_0.3 Patch available CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA

CPE configurations NVD · 19

CPEVersionsRoleVendor
cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*2.6 to before 6.4Vulnerablesquid-cache
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:*8.0_aarch64VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:*8.0_s390xVulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:*8.0_ppc64leVulnerableRed Hat
  • cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:* Versions 2.6 to before 6.4 Vulnerable ·squid-cache
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_eus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_arm_64:8.0_aarch64:*:*:*:*:*:*:* Versions 8.0_aarch64 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_ibm_z_systems:8.0_s390x:*:*:*:*:*:*:* Versions 8.0_s390x Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_for_power_little_endian:8.0_ppc64le:*:*:*:*:*:*:* Versions 8.0_ppc64le Vulnerable ·Red Hat
Show 9 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*8.2VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:*8.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:*8.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:*8.8VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:9.2:*:*:*:*:*:*:*9.2VulnerableRed Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:* Versions 8.2 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.4:*:*:*:*:*:*:* Versions 8.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.6:*:*:*:*:*:*:* Versions 8.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:8.8:*:*:*:*:*:*:* Versions 8.8 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:9.2:*:*:*:*:*:*:* Versions 9.2 Vulnerable ·Red Hat

Remediation

  • Fix · CNA squid Fixed in 6.4

Red Hat 10 advisories

  • RHSA-2024:11049 Released 2024-12-16 · Red Hat rating Important
    squid security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) squid-7:3.5.20-17.el7_9.13, squid-migration-script-7:3.5.20-17.el7_9.13
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) squid-sysvinit-7:3.5.20-17.el7_9.13
  • RHSA-2023:7213 Released 2023-11-14 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream (v. 8) libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.aarch64::squid:4, libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.ppc64le::squid:4, libecap-1.0.1-2.module+el8.9.0+19703+a1da7223.s390x::squid:4 +11
  • RHSA-2023:6810 Released 2023-11-08 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream E4S (v. 8.1) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +5
Show 7 more Red Hat advisories
  • RHSA-2023:6804 Released 2023-11-08 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4 +11
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2
  • RHSA-2023:6801 Released 2023-11-08 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4 +11
  • RHSA-2023:6803 Released 2023-11-08 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream AUS (v. 8.2) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2
    • Red Hat Enterprise Linux AppStream E4S (v. 8.2) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +5
    • Red Hat Enterprise Linux AppStream TUS (v. 8.2) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.src::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4, libecap-devel-1.0.1-2.module+el8.1.0+4044+36416a77.x86_64::squid:4 +2
  • RHSA-2023:6748 Released 2023-11-07 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux AppStream (v. 9) squid-7:5.5-6.el9_3.1
  • RHSA-2023:6267 Released 2023-11-02 · Red Hat rating Critical
    squid:4 security update
    • Red Hat Enterprise Linux AppStream (v. 8) libecap-1.0.1-2.module+el8.1.0+4044+36416a77.aarch64::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.ppc64le::squid:4, libecap-1.0.1-2.module+el8.1.0+4044+36416a77.s390x::squid:4 +11
  • RHSA-2023:6268 Released 2023-11-02 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.0) squid-7:5.2-1.el9_0.3
  • RHSA-2023:6266 Released 2023-11-02 · Red Hat rating Critical
    squid security update
    • Red Hat Enterprise Linux AppStream (v. 9) squid-7:5.5-5.el9_2.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 8 and 10 more products — RHSA-2023:6266

    3 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM

    Other records, highest priority first

    • TI-2023-25306 Squid: denial of service in http digest authenticationPriority HIGH 77
    • TI-2023-25307 Squid: denial of service in ftpPriority MEDIUM 51
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 8 and 10 more products — RHSA-2023:6268

    3 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM

    Other records, highest priority first

    • TI-2023-25306 Squid: denial of service in http digest authenticationPriority HIGH 77
    • TI-2023-25307 Squid: denial of service in ftpPriority MEDIUM 51
    Show all 3 records → Advisory →
Show 7 more groups
  • Advisory ·

    Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 8 and 10 more products — RHSA-2023:6748

    3 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM

    Other records, highest priority first

    • TI-2023-25306 Squid: denial of service in http digest authenticationPriority HIGH 77
    • TI-2023-25307 Squid: denial of service in ftpPriority MEDIUM 51
    Show all 3 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6267

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25306 Squid: denial of service in http digest authenticationPriority HIGH 77
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6801

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25306 Squid: denial of service in http digest authenticationPriority HIGH 77
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6803

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25306 Squid: denial of service in http digest authenticationPriority HIGH 77
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6804

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25306 Squid: denial of service in http digest authenticationPriority HIGH 77
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:6810

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25306 Squid: denial of service in http digest authenticationPriority HIGH 77
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions and 9 more products — RHSA-2023:7213

    2 records Highest priority Priority HIGH 1 HIGH, 1 MEDIUM

    Other records, highest priority first

    • TI-2023-25306 Squid: denial of service in http digest authenticationPriority HIGH 77
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 6AffectedNo fix planned: Will not fix
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:6267, RHSA-2023:7213
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:6266, RHSA-2023:6748
Red Hat Enterprise Linux AppStream AUS (v. 8.2)Fixed RHSA-2023:6803
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2023:6804
Red Hat Enterprise Linux AppStream E4S (v. 8.1)Fixed RHSA-2023:6810
Red Hat Enterprise Linux AppStream E4S (v. 8.2)Fixed RHSA-2023:6803
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2023:6804
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2023:6801
Red Hat Enterprise Linux AppStream EUS (v.9.0)Fixed RHSA-2023:6268
Red Hat Enterprise Linux AppStream TUS (v. 8.2)Fixed RHSA-2023:6803
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2023:6804
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2024:11049
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2024:11049

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-46846

References

Advisory 13

  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
See all 1955 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences